ghagga 2.0.0

package/dist/lib/oauth.js

@@ -0,0 +1,110 @@
+/**
+ * GitHub OAuth Device Flow for CLI authentication.
+ *
+ * Implements RFC 8628 (Device Authorization Grant) against GitHub's
+ * OAuth endpoints. The user visits github.com/login/device, enters
+ * a short code, and the CLI receives an access token.
+ *
+ * @see https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps#device-flow
+ */
+/** GHAGGA OAuth App Client ID (public — safe to embed in code) */
+export const GITHUB_CLIENT_ID = 'Ov23liyYpSgDqOLUFa5k';
+// ─── Device Flow Steps ──────────────────────────────────────────
+/**
+ * Step 1: Request device and user verification codes from GitHub.
+ */
+export async function requestDeviceCode() {
+    const response = await fetch('https://github.com/login/device/code', {
+        method: 'POST',
+        headers: {
+            Accept: 'application/json',
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({
+            client_id: GITHUB_CLIENT_ID,
+            scope: '', // No scopes needed — GitHub Models uses the token as-is
+        }),
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Failed to request device code: ${response.status} ${text}`);
+    }
+    return response.json();
+}
+/**
+ * Step 3: Poll GitHub for the access token until the user authorizes.
+ *
+ * Respects the polling interval and handles slow_down errors by
+ * increasing the interval as required by the spec.
+ *
+ * @param deviceCode - The device_code from Step 1
+ * @param interval - Polling interval in seconds from Step 1
+ * @param expiresIn - Expiration time in seconds from Step 1
+ * @returns The access token on success
+ * @throws On timeout, access_denied, or other fatal errors
+ */
+export async function pollForAccessToken(deviceCode, interval, expiresIn) {
+    let currentInterval = interval;
+    const deadline = Date.now() + expiresIn * 1000;
+    while (Date.now() < deadline) {
+        // Wait for the polling interval
+        await sleep(currentInterval * 1000);
+        const response = await fetch('https://github.com/login/oauth/access_token', {
+            method: 'POST',
+            headers: {
+                Accept: 'application/json',
+                'Content-Type': 'application/json',
+            },
+            body: JSON.stringify({
+                client_id: GITHUB_CLIENT_ID,
+                device_code: deviceCode,
+                grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+            }),
+        });
+        const data = await response.json();
+        // Check if we got a token
+        if ('access_token' in data && data.access_token) {
+            return data;
+        }
+        // Handle error responses
+        const error = data;
+        switch (error.error) {
+            case 'authorization_pending':
+                // User hasn't entered the code yet — keep polling
+                continue;
+            case 'slow_down':
+                // GitHub wants us to slow down — add 5 seconds
+                currentInterval = (error.interval ?? currentInterval) + 5;
+                continue;
+            case 'expired_token':
+                throw new Error('Device code expired. Please try logging in again.');
+            case 'access_denied':
+                throw new Error('Authorization was denied. The user cancelled the login.');
+            default:
+                throw new Error(`OAuth error: ${error.error}${error.error_description ? ` — ${error.error_description}` : ''}`);
+        }
+    }
+    throw new Error('Device code expired (timeout). Please try logging in again.');
+}
+// ─── GitHub API ─────────────────────────────────────────────────
+/**
+ * Fetch the authenticated user's profile from GitHub API.
+ */
+export async function fetchGitHubUser(token) {
+    const response = await fetch('https://api.github.com/user', {
+        headers: {
+            Authorization: `Bearer ${token}`,
+            Accept: 'application/vnd.github.v3+json',
+            'User-Agent': 'GHAGGA-CLI/2.0.0',
+        },
+    });
+    if (!response.ok) {
+        throw new Error(`Failed to fetch GitHub user: ${response.status}`);
+    }
+    return response.json();
+}
+// ─── Helpers ────────────────────────────────────────────────────
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=oauth.js.map

package/dist/lib/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/lib/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AA8BvD,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,sCAAsC,EAAE;QACnE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,SAAS,EAAE,gBAAgB;YAC3B,KAAK,EAAE,EAAE,EAAE,wDAAwD;SACpE,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAiC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAkB,EAClB,QAAgB,EAChB,SAAiB;IAEjB,IAAI,eAAe,GAAG,QAAQ,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;IAE/C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,gCAAgC;QAChC,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6CAA6C,EAAE;YAC1E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,gBAAgB;gBAC3B,WAAW,EAAE,UAAU;gBACvB,UAAU,EAAE,8CAA8C;aAC3D,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA2C,CAAC;QAE5E,0BAA0B;QAC1B,IAAI,cAAc,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAChD,OAAO,IAA2B,CAAC;QACrC,CAAC;QAED,yBAAyB;QACzB,MAAM,KAAK,GAAG,IAAuB,CAAC;QAEtC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,uBAAuB;gBAC1B,kDAAkD;gBAClD,SAAS;YAEX,KAAK,WAAW;gBACd,+CAA+C;gBAC/C,eAAe,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC1D,SAAS;YAEX,KAAK,eAAe;gBAClB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAEvE,KAAK,eAAe;gBAClB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YAE7E;gBACE,MAAM,IAAI,KAAK,CACb,gBAAgB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/F,CAAC;QACN,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AACjF,CAAC;AAED,mEAAmE;AAEnE;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,6BAA6B,EAAE;QAC1D,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,MAAM,EAAE,gCAAgC;YACxC,YAAY,EAAE,kBAAkB;SACjC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAyB,CAAC;AAChD,CAAC;AAED,mEAAmE;AAEnE,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "ghagga",
+  "version": "2.0.0",
+  "private": false,
+  "type": "module",
+  "description": "AI-powered code review from the command line — free with GitHub Models",
+  "author": "JNZader",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/JNZader/ghagga.git",
+    "directory": "apps/cli"
+  },
+  "homepage": "https://github.com/JNZader/ghagga#readme",
+  "bugs": {
+    "url": "https://github.com/JNZader/ghagga/issues"
+  },
+  "keywords": [
+    "ghagga",
+    "code-review",
+    "ai",
+    "cli",
+    "github",
+    "llm",
+    "static-analysis",
+    "multi-agent",
+    "gpt",
+    "developer-tools"
+  ],
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "bin": {
+    "ghagga": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/index.ts",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "ghagga-core": "workspace:^",
+    "commander": "^13.0.0",
+    "dotenv": "^16.4.0"
+  },
+  "devDependencies": {
+    "tsx": "^4.19.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0",
+    "@types/node": "^22.0.0"
+  }
+}